expose arrayFunctionTaintStep in TaintTracking.qll

This commit is contained in:
Erik Krogh Kristensen
2020-03-09 17:22:29 +01:00
parent 509941649c
commit 981eef2587
2 changed files with 3 additions and 1 deletions

View File

@@ -263,6 +263,8 @@ module TaintTracking {
}
}
predicate arrayFunctionTaintStep = ArrayTaintTracking::arrayFunctionTaintStep/3;
/**
* A taint propagating data flow edge for assignments of the form `o[k] = v`, where
* `k` is not a constant and `o` refers to some object literal; in this case, we consider

View File

@@ -52,7 +52,7 @@ private DataFlow::SourceNode argumentList(SystemCommandExecution sys, DataFlow::
result = pred.backtrack(t2, t)
or
t = t2.continue() and
ArrayTaintTracking::arrayFunctionTaintStep(result, pred, _)
TaintTracking::arrayFunctionTaintStep(result, pred, _)
)
}